set anti CSRF cookie
post new sections to correct url